# {{output.header}}
# {{{output.link}}}
ssl = required

ssl_cert = </path/to/signed_cert_plus_intermediates
ssl_key = </path/to/private_key
{{#if output.usesDhe}}

  {{#if (minver "2.3.0" form.serverVersion)}}
# {{output.dhCommand}} > /path/to/dhparam.pem
ssl_dh = </path/to/dhparam.pem
  {{else}}
ssl_dh_parameters_length = {{output.dhParamSize}}
  {{/if}}
{{/if}}

# {{form.config}} configuration
{{#if (minver "2.3.0" form.serverVersion)}}
ssl_min_protocol = {{output.protocols.[0]}}
{{else}}
ssl_protocols = {{join output.protocols " "}}
{{/if}}
{{#if output.ciphers.length}}
ssl_cipher_list = {{{join output.ciphers ":"}}}
{{/if}}
ssl_prefer_server_ciphers = {{#if output.serverPreferredOrder}}yes{{else}}no{{/if}}